Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zXrOjxGX_DI-tXkFUtLuBXotuic.roa
File: zXrOjxGX_DI-tXkFUtLuBXotuic.roa (raw, json)
Hash identifier: mrO+89Y/llkPbD0Oqqb4OVuncS888EEiNoMgxFZFl6I=
Subject key identifier: CD:7A:CE:8F:11:97:FC:32:3E:B5:79:05:52:D2:EE:05:7A:2D:BA:27
Certificate issuer: /CN=15ffa042114301368b4069abd68a1efbac47fdce
Certificate serial: 019427B64976B819A2A5FE544C17E8354430
Authority key identifier: 15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zXrOjxGX_DI-tXkFUtLuBXotuic.roa
Signing time: Thu 02 Jan 2025 15:50:45 +0000
ROA not before: Thu 02 Jan 2025 15:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43852
IP address blocks: 62.215.174.0/24 maxlen: 24
62.215.221.0/24 maxlen: 24
185.95.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:49:76:b8:19:a2:a5:fe:54:4c:17:e8:35:44:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ffa042114301368b4069abd68a1efbac47fdce
Validity
Not Before: Jan 2 15:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd7ace8f1197fc323eb5790552d2ee057a2dba27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b6:59:14:4a:7b:4d:cb:dc:df:5f:16:73:d6:
f3:66:26:a2:9b:bd:ca:1b:46:76:76:7e:81:69:4e:
ba:99:7e:66:14:f4:31:35:53:54:dc:e7:14:68:6c:
b7:42:33:d6:da:48:fb:1d:6b:19:16:21:8c:b8:c9:
a8:18:f5:4e:9e:ff:0b:22:45:ff:5d:a2:62:72:14:
15:bc:59:a2:f0:eb:d0:96:99:a7:35:f9:98:6c:a8:
c6:ea:36:e1:eb:29:e3:c3:68:88:a5:a0:f0:6d:bd:
13:71:4f:d4:ed:c9:ce:85:4d:33:1a:58:ed:d4:92:
a8:6b:d6:fa:34:da:6e:88:b1:4c:8a:3e:25:a4:b4:
c3:83:66:6a:26:ab:e2:a5:c9:cb:5d:d0:94:b1:8e:
70:ba:46:ab:56:b6:88:e8:15:79:7e:32:66:83:9d:
5b:54:58:2d:c2:2c:b0:3f:00:92:71:83:ab:cc:ec:
8d:81:05:b3:07:26:2e:b6:d4:81:49:51:1f:27:7c:
c8:7a:c6:93:1c:20:4f:86:b5:3d:da:2d:42:d3:ae:
4b:ef:c6:f1:99:41:f7:ec:39:9c:e9:2e:65:45:0c:
ab:f1:33:63:8b:6b:37:0c:c7:31:ff:22:6a:f9:d5:
a5:0b:18:71:27:c9:02:b4:20:a7:d1:ca:cf:1c:b0:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:CE:8F:11:97:FC:32:3E:B5:79:05:52:D2:EE:05:7A:2D:BA:27
X509v3 Authority Key Identifier:
keyid:15:FF:A0:42:11:43:01:36:8B:40:69:AB:D6:8A:1E:FB:AC:47:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff-gQhFDATaLQGmr1ooe-6xH_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/zXrOjxGX_DI-tXkFUtLuBXotuic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/149bc5-51aa-4e7b-8f03-b73a36d939b2/1/Ff-gQhFDATaLQGmr1ooe-6xH_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.215.174.0/24
62.215.221.0/24
185.95.6.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d8:e0:4c:50:80:3f:7e:93:92:7a:40:d8:f1:71:f0:4c:72:
3e:ee:99:4d:51:86:e6:d0:4f:9e:dd:53:86:c9:4a:16:62:4b:
5d:3f:17:99:19:4d:d2:97:03:a9:38:e8:74:ae:57:4f:b9:92:
4d:cf:cc:b0:a1:a4:c7:52:17:88:b4:3b:6d:0a:58:af:67:6a:
5b:e9:f1:90:94:62:54:f6:82:d5:04:f6:71:81:0f:c9:48:86:
22:f7:88:7b:a9:28:da:29:01:e2:fa:39:d8:93:be:34:9b:e6:
0a:ce:5a:e6:9d:65:dc:5a:cd:67:6c:de:46:82:35:2f:81:a7:
d5:55:6a:03:91:81:f0:9a:a8:67:69:fd:3e:65:82:52:dd:00:
a1:1e:c9:25:10:a5:ae:c2:4f:43:7a:f7:90:65:75:6b:94:0b:
ab:5d:cb:b3:33:57:d3:a9:07:15:a5:b7:6d:f5:61:c9:a0:1f:
af:8a:8e:73:fb:71:bf:b7:59:bd:9d:74:32:d1:1c:bd:bb:f3:
a3:a0:35:5b:50:ec:20:e6:db:82:1a:0e:fa:06:3c:36:76:0f:
ec:f0:a8:a0:eb:a7:a8:87:85:7c:b1:27:61:48:22:eb:1f:00:
2b:22:c1:7f:ac:5f:ff:84:c2:83:ac:12:24:89:66:d0:6b:1b:
e9:10:ba:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net